Legal
Data Processing Agreement
How we handle personal data that we process on your behalf when you use our products and services.
Last updated: September 12, 2026
Scope of this agreement
This Data Processing Agreement applies whenever we process personal data on your behalf in connection with the services you buy from Thehubcentricbusinessmodel.com. It forms part of, and is governed by, our Terms of Service. Where this agreement conflicts with the terms on a specific point about data processing, this agreement controls.
Roles of the parties
For the data you upload, import, or collect through the service, you are the data controller and we are the data processor. For data we collect about you as our customer — billing details, account records, support history — we act as controller and our Privacy Policy applies instead.
Processing instructions
We process personal data only on your documented instructions, which include using the service as configured by you, and as otherwise required by law. If we believe an instruction breaches applicable data protection law, we will tell you and may pause that processing until it is resolved.
Nature and purpose of processing
We process personal data to host, store, transmit, back up, secure, and display it so we can deliver the service, provide support, prevent abuse, and meet our legal obligations. The categories of data and data subjects are determined by you through your use of the service.
Confidentiality
Access to personal data is limited to personnel who need it to deliver or support the service. Everyone with access is bound by written confidentiality obligations and receives training appropriate to their role.
Security measures
We maintain technical and organisational measures appropriate to the risk, including encryption in transit, access controls and least-privilege permissions, environment separation, logging and monitoring, regular patching, and periodic review of our providers’ security posture.
Sub-processors
You give general authorisation for us to engage sub-processors — such as cloud hosting, payment processing, email delivery, and analytics providers — to deliver the service. Each is bound by data protection obligations no less protective than those in this agreement. We will give notice of new sub-processors and you may object on reasonable data protection grounds.
International transfers
Personal data may be processed in countries other than your own, including the United States. Where data leaves the UK or European Economic Area, we rely on an approved transfer mechanism such as Standard Contractual Clauses together with any supplementary measures the transfer requires.
Assistance with data subject rights
Taking into account the nature of the processing, we will assist you with requests from individuals exercising their rights of access, correction, deletion, restriction, objection, and portability. If a request reaches us directly, we will forward it to you rather than responding on your behalf, unless you instruct otherwise.
Personal data breaches
We will notify you without undue delay after becoming aware of a personal data breach affecting data we process for you, and will provide the information reasonably available to help you meet your own notification obligations to regulators and affected individuals.
Audits and information
On reasonable written request, and no more than once a year unless a regulator or a breach requires otherwise, we will make available the information necessary to demonstrate compliance with this agreement. Where available, current third-party audit reports or certifications may be provided to satisfy such a request.
Return and deletion of data
On termination of the service, and at your choice, we will return or delete the personal data we process for you, except where retention is required by law. Backups are deleted on our standard rolling schedule, and remain protected by this agreement until they are.
Liability
The limitations and exclusions of liability in our Terms of Service apply to this agreement, in aggregate across both documents, to the fullest extent permitted by applicable data protection law.
Contact us
Questions about this policy? Write to us at [[contact_email]] and we will get back to you.